CVEs published by Vaadin Ltd.

CVEs published by Vaadin Ltd. (CVE Numbering Authority). 6 tracked.

CVE-2026-7860 LOW 1.6 A possible information disclosure vulnerability exists in the Vaadin Maven plugin and Vaadin Gradle plugin tha
CVE-2026-107588 HIGH 8.4 Vaadin Charts renders charts with the Highcharts library and pins an exact version of it, 9.2.2 in Vaadin 22 t
CVE-2026-110803 HIGH 8.7 VaadinService.requestEnd() in Vaadin Framework 8 locks the session and then reads the v-uiId request parameter
CVE-2026-110974 MEDIUM 6.3 The org.json parser in com.vaadin.external.google:android-json recurses once per nesting level with no depth l
CVE-2026-91860 MEDIUM 6.3 A prototype pollution vulnerability exists in the deep merge helpers of Vaadin Charts and Vaadin Component Bas
CVE-2026-93547 MEDIUM 5.3 A missing authorization check in the Vaadin Spreadsheet component allows an authenticated user of an applicati